Online Safety Reminders for the Holiday Season and General Internet Use

During any Holiday season, it’s easy to go into auto-pilot and let your guard down when safeguarding your online presence.

Some things to keep in mind during the break and Holiday season -

• Check the email address instead of relying on the displayed name on an email
  • The displayed name on an email can be any name, while the actual email address is something different. Scammers will attempt to trick you by using the name of something or someone familiar. Always check the actual email address, instead of just the name you see.
    • Help Desk (HelpDesk@iusd.org) <-- Familiar display name, legitimate email
    • Help Desk (help-desk@support.ru) <-- Familiar display name, fake email address
• We have a restriction rule in place for Email.
  • Access to email outside of the US is blocked. Users that try to access their email from outside the US, will have their account automatically suspended.
  • If staff members need access to email, have them submit a Help Desk ticket to add them to the exception list. This exception list will be active for the duration of the break.
    • If they need an extended exception, they will also need to state why.
• Just because we’re on break, doesn’t mean attackers are too.
  • For those that will be periodically checking their email – keep an eye out for any indication that your account or someone else’s may be compromised. A key hint is to check your Sent folder to make sure sent mail are actually ones that you sent. You may also want to check any mail rules, and even your Deleted folder to see if any attacker is trying to cover their tracks.
  • If you start to see a lot of “Undelivered” email in your Inbox, your email may have been spoofed.
    • If you feel your account may be at risk, you can change your password on https://identity.iusd.org from any device.
  • Tech support scams are not uncommon, especially with the caller claiming to be from a well-known retailer. A particular Amazon scam begins with you receiving a call from “Amazon Support” stating there was a suspicious transaction on your account. They then ask that you download a piece of software to remote control your computer while they check your account. Allowing remote access to your computer opens you to malware being installed on your computer, identity theft, compromised personal accounts, etc. Online retailers typically won’t call you concerning a suspicious order on your online account and then ask to remotely connect to your computer. Legitimate support already has access to your account through their system.
• During the Holidays, scammers like to take advantage of everyone’s good hearted feeling.
  • Scammers like to use current social tragedies to take advantage of those that just want to help.
  • Be wary of emails or even phone calls claiming to be from organizations that you did not reach out to.
  • Clicking on emails from unknown senders and unrecognizable sellers could infect your computer with viruses and malware. It’s better to play it safe. Delete them, don’t click on any links, and don’t open any attachments from individuals or businesses you are unfamiliar with.
• Don’t leave laptops visible in your vehicle.
  • Thieves will take any opportunity they can get to steal anything of value.
• The Holidays are a prime time for hackers to try to steal your information. 
  • Always remember to check the website address when making purchases or when entering any account information. Make sure the web address begins with HTTPS:// to ensure a secure browser connection.
    • Before entering your personal or financial information, you need to ensure that the site you are on is legitimate and can be trusted. When visiting a website look for the “lock” symbol; this might appear in the URL bar, or elsewhere in your browser. Additionally, check that the URL for the website has “HTTPS” in the beginning. These both indicate that the site uses encryption to protect your data.  
• Shop at business websites you trust.
  • Beware of “rock-bottom” prices.
    • Sometimes a good deal really is too good to be true. Check out the company on ResellerRatings.com. This site allows users to review online companies to share their experiences purchasing from those companies. This will give you an indication of what to expect when purchasing from them.

  • A common tactic for cybercriminals targeting online shoppers is registering look-alike domains. Look-alike domains closely mimic legitimate websites of popular retail sites. Most retail websites have simple URLs — like michaelkors.com, louisvuitton.com or calvinklein.us. In some cases, depending on the font, letters can be switched to look like another. For example, michaeIkors.com (ßthe “L” is actually a capital “I”) is actually not the same as michaelkors.com. It’s always a good idea to type out the website address yourself, especially if you’re unsure of an email ad with links. If you see extra words in the website address like "deals," "sales”, "super discounts," extra characters or all caps (Amaz0n-superDeals.com), there's a good chance the website is a scam.

• Give your debit card a holiday break.
  • When you are shopping online always remember that it is best to rely on your credit cards or payment services such as PayPal. Credit cards offer much more protection and less liability if your information were to be compromised. On the contrary, debit cards are linked directly to your bank account, thus, you’re at a much greater risk if a criminal were to obtain this information. Additionally, in the event of a fraudulent transaction were to occur, credit card companies possess the ability to reverse the charge and hopefully, investigate the issue further.
• Consider freezing your credit.
  • A credit freeze restricts access to your credit report, which means you — or others — won’t be able to open a new credit account while the freeze is in place. You can temporarily lift the credit freeze if you need to apply for new credit. When the freeze is in place, you will still be able to do things like apply for a job, rent an apartment, or buy insurance without lifting or removing it.
  • As cyber-safe and secure as you think you might be, we all make mistakes. During this time, pay close attention to your credit report to ensure that nothing out of the ordinary is taking place. The world of online shopping can bring lots of new products to your doorstep and can prove to be a lot of fun when finding that special gift. Just remember to be careful so you don’t make your data a special gift to cybercriminals.
• Avoid public Wi-Fi.
  • You might be tempted to take your shopping spree to a coffee shop for a cup of joe. Keep in mind, Wi-Fi networks use public airwaves. With a little tech know-how and the freely available Wi-Fi password at your favorite cafe, someone can intercept the data you send and receive while on free public Wi-Fi. Shopping online usually means giving out information that an identity thief would love to grab, including your name and credit card information. Bottom line: It’s never a good idea to shop online or log in to any website while you’re connected to public Wi-Fi.
  • While it is best to avoid public Wi-Fi altogether, if you need to utilize a public network ensure that you never establish an autoconnection, and that you are logged out of all personal accounts, such as your banking sites. Though it is perfectly acceptable to auto-connect to a trusted source such as your home, when out in public, consider shutting off the Wi-Fi option on your phone and use your data plan.
• Never save your information on your browser.
  
  • Never save usernames, passwords, or credit card information in your browser, and periodically clear your offline content, cookies, and history. Always utilize strong passwords and consider setting up Multi-factor Authentication (MFA). This is as simple as receiving a text or code that you need to type in while signing on to a system. Oftentimes within the account preferences of your device, you can set up an Authentication Application.
    • Additionally, when online shopping, consider checking out as a guest user rather than creating an account, as well as utilizing your private browsing feature. For instance, Google Chrome’s Incognito Mode won’t save any of your browsing history, cookies, site data, or information you enter on forms. While the convenience of online shopping is unparalleled, never let this convenience override your security best practices.
• Understand your shopping applications.
  
  • Apps have a way of making everything more convenient for your shopping experience, but certain apps could also make it convenient for criminals to take your information. Make sure you are only installing and utilizing trusted applications from reliable cyber markets, such as the Apple App Store or Google Play Store. Additionally, if you find yourself questioning certain applications, be sure to check out the reviews by legitimate user accounts, as this can help you identify if there is anything suspicious surrounding them.